Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 09:10

General

  • Target

    4a5b40afd567b3e4860d022be139cb64_JaffaCakes118.html

  • Size

    37KB

  • MD5

    4a5b40afd567b3e4860d022be139cb64

  • SHA1

    69409ebe1fa46d728355d392a2fa85ccc1d5b8ce

  • SHA256

    d496ee01791ba8e0742c6ee747b5d6b58eb368dceaa81bf0b666e57fce2671ac

  • SHA512

    e9af5f3ef4555532dcb13d625dd88840bf6b3fcaf2be35f191e0b935de52e9a47d54c34c3c0183a6870400345016d81d802204a24c982124cb32e0d517c6854b

  • SSDEEP

    768:SyKzC6CYCdC+CuCT227jKSK5e9slhgiI6c:SRnNq9Bc2De9Ghgi9c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a5b40afd567b3e4860d022be139cb64_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1916
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1916 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1636

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4399d942680b15cc4b0c87725d3e114c

    SHA1

    81f0c9699d4eecb38c8a5dd018052d0b38f304db

    SHA256

    de3055e6db9f82c4349b7f79c44de7eb5ea8a50f12dcb02f80e50e7d45a98efa

    SHA512

    9b56ab06a3be057cd73707b2c37f7d32b76aaab76fdeab0b57b2886eb347294b66a54b3988fabeaf69954223afff68d18962f6737a4db93bab57ccaac2d0fb2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d89831a1f9fcce056e241cf0d52a47e

    SHA1

    89966be4a557eb96725ccb361d84738e741c9229

    SHA256

    f0b78e726c0ee3941e38c1a9a52d57ad8ddd9243f0a5ef37add15d88ec934569

    SHA512

    c715440c406cd09d04ab9b12b6326745d7dfe959e56a13d2274f0d946afb957bfc8310cc467167100436b79aa61931188a9828b0d6f47a13d375b8cfacb41c4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    159797dcc6647e69f0db1dfe87d07b35

    SHA1

    aaee1d56e7f02f7b561e8e1a391c0c539bde24d4

    SHA256

    d7140df32a8805f2f2758e7ab8d7c110348d6eddca4ec4aad76b6383ce248707

    SHA512

    2af3e36e7dfd186b20bdc7189824a10ebfd1f887c69a5031e74839fca347121c14e51aa0e907ba19a1100fc3670f46810dcef23672eef00a3bb3ca330f78fdf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec9fbe2dd1118d85f1a76473698ab9da

    SHA1

    d2702270d91ff3ade62133ac761301f240b662ec

    SHA256

    b871e3515aa49bb451f67efc09a33edb66b4144c85e32034e180cdb34aaea064

    SHA512

    03a18915079d9a205e8f1ab10422bc14df6dca7c6379d8f3a2f181c607e6d408d0f0768e47d9ee4a2cc887802c85c4caef4000078343312ac8e282340508f469

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84db7af7f124b42adf40c4d18e24976a

    SHA1

    2fd3dcd4ff2a55d38c2617a1012bd42b1ecebb91

    SHA256

    c941c735727b051662bdb21626bb8e6664152dba44aec50377def9151dd0d080

    SHA512

    086e69fa47dde39188735e9e14d494ee896d7412be9b0629e633291c733c006217751b5599fd77951fc310b5b30bec1bdc3e99b7d009be51bab7d5e5047e6d17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e3053ce24955a957ad66e2fb976dab5

    SHA1

    d38cf57a6130a6fa4597b4205134a8ca1118ebf0

    SHA256

    600a0806f809e8fefb2b6e917d3e9377380d2536ca6f4c77e780f2396ca97bad

    SHA512

    ea494165de34dfcfe0761bb6e4cee43dcf5cdcd569db4de89aea05423e8e86c439051a5a8da7dabc696ad00adb90ca92ddfba23d1bd4e52440c782721a6544b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    891f59f5ace3274d130c322bb7e35d9d

    SHA1

    c0d9bbad5269d5cbdb3040fdd0026c9b59170b40

    SHA256

    78a0d3d92716af0b56c36c32399390b5c9e0b7b78de6feb39c1b1ae962435762

    SHA512

    bfdcaf9892526895abce079b4cb3713b2c16e8ec6d9cdcca5ffb00f5fc0418545ac54c1e5617c96d8ec7c75107da7b649acd41411c1e01637eccd70f02899361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42c5322469b6c0eb3d693bf218391c23

    SHA1

    7585e6cfec0538c00b988aa2507f5956a5816e82

    SHA256

    8fa9ac603375cd807742ce570f396ac17d7d26cb442f384564fef0f6435e04dc

    SHA512

    6a6b8f781e0120a219e910217d9326b9791b7d62f7bb25a8645ebf42c1fb321b7eebbe5cc6496881d5c32cf590522e092d08946833e33e6bb1559cdde63e1c21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    778334af55a2e0796209b27e0260eb5d

    SHA1

    c9fb8d22680ac5f6b037114864457a9ef3c27489

    SHA256

    9999c3d41e417a3d26a8b5cfbe61c6f1b9cbcb82a98a0525995dedc2d9a4cae4

    SHA512

    def3cd257ea8fb0ba9a622d30a2b5cb3451c857b612cda65e5da5dd00561be28345944e73d5b0d17b8d23f3cbf23a15b54b0ca4ee0cb46f8a2d17654907ed253

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ac9cbf1ce212bace9d373e0ed8421eb

    SHA1

    713d957f9b05beee1a4ad245f0922611c127cb02

    SHA256

    a4ef3b09f7b5cde0f90e3da3036bcbcc3ca8ad491944c5bc7231a072798a606b

    SHA512

    37688a58508d4ad226b170bd19818579578b14354d268594da44beb480fa4b4f892ee0c9584f646698345919f4482504d596aa2615a24514e528db6e72aa891f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd2e4645f2770b2b85d080481ea4a9e7

    SHA1

    99a97875527afe3a29efd27ce395607af4e2b736

    SHA256

    aa563df984411469855019ec34f4995114952b3604727eae8e1cf40fb2c3de70

    SHA512

    e352d8c4888bdd5fc35a562ba03c25d42b523588f89820cf4b37722ba35bde5d7dbe157513593eb7d1d9a9077f972251e0759adc624090091239fd4ba0b0efbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abbc9b1363d47e4acf8f830bd1c19d4f

    SHA1

    bf463bc623ccef4614b7fe4b41a83d8d3f769f4f

    SHA256

    5023e6395258e860d73e88c28969eb42a38d47c94767c9b0460669e2660311a1

    SHA512

    115669fd09d0273924c6c92820d3c78f63478537ebe737c7ba9508bc7adf6dc0fbc2ac1301be32d83b4d3d307f71d648189ec441b2e89dd62b6ab819b4de724f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    064e2ceb5392302cde36b840af49ae6a

    SHA1

    7261140b19d16ffef58e9817af1b0a7ab7dd6c6a

    SHA256

    695414cdbd2cd4a3a18405ad9a39b8930db5343254c1a565bbbfeb14acaff68a

    SHA512

    113e1d31e16cc520614289b1f8473e3656c19100dcdc3e3de9ec5e7e4e2115c4912447f8b1240ddb740673a27dad7bb2a38b6f0f334c04a9de33adb32d2a2254

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a25efaa143dd063fc85977bc5c1feefb

    SHA1

    8d579bb8526fcdb7e9452ad8bd4af90c782f1130

    SHA256

    c7ce49468ce3aa5a7af8610ccf949f7ac9d3ae81e9c02a04c02de9223443683b

    SHA512

    a4f5b307e85e20628fe3cdf3ce7b952016221cf6119da47cfe8ba023e1d29a74300890bab67e0717fbb63c4dce2da94a73f3819934d0a464bda5ce91a24ce8ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a4ffd0d3cecc81cc35f49121c0bdad7

    SHA1

    1dc151ee115f90ea41fcd6a9657d76dc9dcb79f1

    SHA256

    b97849c661d221a83833747a5144707f81b84428d080a7de60e76e9b76960930

    SHA512

    558614f4c0eb794c63e56688fcc5f96f020d504878293dbfe55888257a398cf25e462c163c5eb705247512ab6455a6c0507ea7a19360d3681ea0176d316f4302

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f6f76f0aec786af9c9082a82f0c58e7

    SHA1

    a871bb5399c36d5abd1c4597d6755c770cf9af86

    SHA256

    0723a1053cf1b4d9f52771144fd0a741f11f74d013ff606e64c29c9c99e9fd4c

    SHA512

    e04aa57067f73a00c674dc986c95c5a814cb914f27584943671214c4eb4f2dc6b07f2767e684ffcdfc11a2276eaf5c621836b79224988a72d5f3bcc7aa7615f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe30b48a6c222742eb1e653da7534014

    SHA1

    36ff6187a7972aeaaa73a73467d41e0e0ea47a11

    SHA256

    c8678e8c9b4ac67dc2f660aeb768ee7b458030d2e285364cdf88ea8c4e39d62a

    SHA512

    d57ad7967adceb0c655ac553513c49d2a275c82f5ebbd24228266b341d0246f4a597532f8adf7396647784dc14a52ed33b697fe4edf19b713d0d39f86d7c94ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a203a47f9a1271b357de6840818077f

    SHA1

    cabb11b5705d044b38b92fa8fc483f062cb1e8e6

    SHA256

    1dde554d5f4c09dfbc18e69e9fcb523eee3f8d43adee5b9a6febc17880d60520

    SHA512

    2fe2b732efebb715a7db29db963d673892c9847e6402280fc3005476fb009ac1a10955b783e9cfdf5c1010ca21b216fbcece507e78f5c953b5b97e8ca92672c5

  • C:\Users\Admin\AppData\Local\Temp\Cab914A.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar919B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a